Closed
Bug 1334707
Opened 7 years ago
Closed 7 years ago
Assertion failure: result, at src/accessible/ipc/DocAccessibleParent.cpp:391
Categories
(Core :: Disability Access APIs, defect, P2)
Core
Disability Access APIs
Tracking
()
RESOLVED
WORKSFORME
| Tracking | Status | |
|---|---|---|
| firefox54 | --- | affected |
People
(Reporter: tsmith, Unassigned)
References
(Blocks 1 open bug)
Details
(Keywords: crash, testcase)
Attachments
(3 files)
STR:
0) make sure e10 is enabled
1) enable screen reader
2) set dom.allow_scripts_to_close_windows=true (so the test case can trigger the issue)
3) set dom.disable_open_during_load=false (so the test case can trigger the issue)
4) open test case
Found on Ubuntu 16.04 using ASan debug build.
This will crash ASan-opt builds but I do not get a backtrace. No idea what's going on should another bug be logged?
Assertion failure: result, at /home/worker/workspace/build/src/accessible/ipc/DocAccessibleParent.cpp:391
==31517==ERROR: AddressSanitizer: SEGV on unknown address 0x000000000000 (pc 0x7f1725db0819 bp 0x7ffd4a8c2bf0 sp 0x7ffd4a8c2b40 T0)
#0 0x7f1725db0818 in mozilla::a11y::DocAccessibleParent::RecvBindChildDoc(mozilla::a11y::PDocAccessibleParent*, unsigned long const&) /home/worker/workspace/build/src/accessible/ipc/DocAccessibleParent.cpp:386:3
#1 0x7f1720e0420f in mozilla::a11y::PDocAccessibleParent::OnMessageReceived(IPC::Message const&) /home/worker/workspace/build/src/obj-firefox/ipc/ipdl/PDocAccessibleParent.cpp:7472:20
#2 0x7f1720d5a023 in mozilla::dom::PContentParent::OnMessageReceived(IPC::Message const&) /home/worker/workspace/build/src/obj-firefox/ipc/ipdl/PContentParent.cpp:2825:16
#3 0x7f172086145f in mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) /home/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:1781:14
#4 0x7f172085e91a in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) /home/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:1716:17
#5 0x7f172085fd4e in mozilla::ipc::MessageChannel::RunMessage(mozilla::ipc::MessageChannel::MessageTask&) /home/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:1589:5
#6 0x7f172086063b in mozilla::ipc::MessageChannel::MessageTask::Run() /home/worker/workspace/build/src/ipc/glue/MessageChannel.cpp:1622:5
#7 0x7f171fd592dc in nsThread::ProcessNextEvent(bool, bool*) /home/worker/workspace/build/src/xpcom/threads/nsThread.cpp:1261:7
#8 0x7f171fd559c0 in NS_ProcessNextEvent(nsIThread*, bool) /home/worker/workspace/build/src/xpcom/threads/nsThreadUtils.cpp:394:10
#9 0x7f1720867ac9 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) /home/worker/workspace/build/src/ipc/glue/MessagePump.cpp:96:21
#10 0x7f17207d4417 in MessageLoop::RunInternal() /home/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:238:3
#11 0x7f17207d42a9 in MessageLoop::Run() /home/worker/workspace/build/src/ipc/chromium/src/base/message_loop.cc:211:3
#12 0x7f1724af829a in nsBaseAppShell::Run() /home/worker/workspace/build/src/widget/nsBaseAppShell.cpp:156:3
#13 0x7f17262bf51c in nsAppStartup::Run() /home/worker/workspace/build/src/toolkit/components/startup/nsAppStartup.cpp:283:19
#14 0x7f17263fd379 in XREMain::XRE_mainRun() /home/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4461:10
#15 0x7f17263fef07 in XREMain::XRE_main(int, char**, mozilla::BootstrapConfig const&) /home/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4638:8
#16 0x7f17263ffd52 in XRE_main(int, char**, mozilla::BootstrapConfig const&) /home/worker/workspace/build/src/toolkit/xre/nsAppRunner.cpp:4729:16
#17 0x4e0453 in do_main(int, char**, char**) /home/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:234:10
#18 0x4dfcd0 in main /home/worker/workspace/build/src/browser/app/nsBrowserApp.cpp:305:16
#19 0x7f173b52a82f in __libc_start_main /build/glibc-t3gR2i/glibc-2.23/csu/../csu/libc-start.c:291
#20 0x41c184 in _start (/home/user/workspace/browsers/firefox_dbg/firefox+0x41c184)
|
Reporter | |
Comment 1•7 years ago
|
||
|
|
Reporter | |
Comment 2•7 years ago
|
||
This is a copy of the base64 encoded content embedded in test_case.html for reference
|
||
Comment 3•7 years ago
|
||
I'm seeing the content tab crash with this STR and accessibility disabled as well. Here is a stack trace:
#0 0x00007fe845cc6c55 in mozilla::dom::TabChild::AsyncPanZoomEnabled() const (this=0x7fe8211a9000)
at /home/eitan/Mozilla/gecko/dom/ipc/TabChild.cpp:437
#1 0x00007fe8457123b8 in mozilla::dom::TouchEvent::PrefEnabled(nsIDocShell*) (aDocShell=0x7fe822157998)
at /home/eitan/Mozilla/gecko/dom/events/TouchEvent.cpp:229
#2 0x00007fe84612d1d3 in mozilla::PresShell::AccessibleCaretEnabled(nsIDocShell*) (aDocShell=0x7fe822157998) at /home/eitan/Mozilla/gecko/layout/base/PresShell.cpp:767
#3 0x00007fe84612d1d3 in mozilla::PresShell::Init(nsIDocument*, nsPresContext*, nsViewManager*, mozilla::StyleSetHandle) (this=0x7fe822223000, aDocument=<optimized out>, aPresContext=
0x7fe822146800, aViewManager=<optimized out>, aStyleSet=...)
at /home/eitan/Mozilla/gecko/layout/base/PresShell.cpp:991
#4 0x00007fe844be3266 in nsDocument::CreateShell(nsPresContext*, nsViewManager*, mozilla::StyleSetHandle) (this=0x7fe82111a800, aContext=<optimized out>, aViewManager=<optimized out>, aStyleSet=...)
at /home/eitan/Mozilla/gecko/dom/base/nsDocument.cpp:3883
#5 0x00007fe8461718a7 in nsDocumentViewer::InitPresentationStuff(bool) (this=0x7fe822296cd0, aDoInitialReflow=<error reading variable: access outside bounds of object referenced via synthetic pointer>)
at /home/eitan/Mozilla/gecko/layout/base/nsDocumentViewer.cpp:727
#6 0x00007fe8461717b4 in nsDocumentViewer::InitInternal(nsIWidget*, nsISupports*, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&, bool, bool, bool) (this=0x7fe822296cd0, aParentWidget=<optimized out>, aState=<optimized out>, aBounds=..., aDoCreation=<optimized out>, aNeedMakeCX=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aForceSetNewDocument=<optimized out>) at /home/eitan/Mozilla/gecko/layout/base/nsDocumentViewer.cpp:986
#7 0x00007fe846171248 in nsDocumentViewer::Init(nsIWidget*, mozilla::gfx::IntRectTyped<mozilla::gfx::UnknownUnits> const&) (this=0x7fe8211a9000, aParentWidget=0x7ffd2d8f0e60, aBounds=...)
at /home/eitan/Mozilla/gecko/layout/base/nsDocumentViewer.cpp:711
#8 0x00007fe84725646f in nsDocShell::SetupNewViewer(nsIContentViewer*) (this=
0x7fe822157800, aNewViewer=0x7fe822296cd0)
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:9490
#9 0x00007fe847255e67 in nsDocShell::Embed(nsIContentViewer*, char const*, nsISupports*) (this=0x7fe822157800, aContentViewer=0x7fe822296cd0, aCommand=<optimized out>, aExtraInfo=<optimized out>)
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:7317
#10 0x00007fe847259c9c in nsDocShell::CreateAboutBlankContentViewer(nsIPrincipal*, nsIURI*, bool, bool) (this=0x7fe822157800, aPrincipal=<optimized out>, aBaseURI=<optimized out>, aTryToSaveOldPresentation=<optimized out>, aCheckPermitUnload=<optimized out>)
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:8191
#11 0x00007fe84723fdf5 in nsDocShell::EnsureContentViewer() (this=0x7fe822157800)
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:8046
#12 0x00007fe847251bf1 in non-virtual thunk to nsDocShell::GetDocument(nsIDOMDocument**) ()
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:5610
#13 0x00007fe845cc5cd5 in mozilla::dom::TabChildBase::GetDocument() const (this=<optimized out>)
at /home/eitan/Mozilla/gecko/dom/ipc/TabChild.cpp:210
#14 0x00007fe845cc5cd5 in mozilla::dom::TabChildBase::GetPresShell() const (this=<optimized out>)
at /home/eitan/Mozilla/gecko/dom/ipc/TabChild.cpp:219
#15 0x00007fe845ccaba7 in non-virtual thunk to mozilla::dom::TabChild::RecvSuppressDisplayport(bool const&) () at /home/eitan/Mozilla/gecko/dom/ipc/TabChild.cpp:1296
#16 0x00007fe8443f75f8 in mozilla::dom::PBrowserChild::OnMessageReceived(IPC::Message const&) (this=0x7fe8211a9058, msg__=...) at /home/eitan/Mozilla/gecko/objdir-linux/ipc/ipdl/PBrowserChild.cpp:4327
#17 0x00007fe844072432 in mozilla::ipc::MessageChannel::DispatchAsyncMessage(IPC::Message const&) (this=0x7fe853026128, aMsg=...) at /home/eitan/Mozilla/gecko/ipc/glue/MessageChannel.cpp:2093
#18 0x00007fe844071568 in mozilla::ipc::MessageChannel::DispatchMessage(IPC::Message&&) (this=0x7fe853026128, aMsg=...) at /home/eitan/Mozilla/gecko/ipc/glue/MessageChannel.cpp:2019
#19 0x00007fe84407200e in mozilla::ipc::MessageChannel::MessageTask::Run() (this=0x7fe822023640)
at /home/eitan/Mozilla/gecko/ipc/glue/MessageChannel.cpp:1921
#20 0x00007fe843b4c197 in mozilla::SchedulerGroup::Runnable::Run() (this=0x7fe8211d2a90)
at /home/eitan/Mozilla/gecko/xpcom/threads/SchedulerGroup.cpp:367
#21 0x00007fe843b5a808 in nsThread::ProcessNextEvent(bool, bool*) (this=0x7fe84191a880, aMayWait=<optimiz---Type <return> to continue, or q <return> to quit---
ed out>, aResult=0x7ffd2d8f1897) at /home/eitan/Mozilla/gecko/xpcom/threads/nsThread.cpp:1422
#22 0x00007fe843b5c20f in NS_ProcessNextEvent(nsIThread*, bool) (aThread=0x7fe8211a9000, aMayWait=<error reading variable: access outside bounds of object referenced via synthetic pointer>)
at /home/eitan/Mozilla/gecko/xpcom/threads/nsThreadUtils.cpp:474
#23 0x00007fe845ca3743 in mozilla::SpinEventLoopUntil<(mozilla::ProcessFailureBehavior)1, mozilla::dom::ContentChild::ProvideWindowCommon(mozilla::dom::TabChild*, mozIDOMWindowProxy*, bool, unsigned int, bool, bool, bool, nsIURI*, nsAString const&, nsACString const&, bool, bool*, mozIDOMWindowProxy**)::$_3>(mozilla::dom::ContentChild::ProvideWindowCommon(mozilla::dom::TabChild*, mozIDOMWindowProxy*, bool, unsigned int, bool, bool, bool, nsIURI*, nsAString const&, nsACString const&, bool, bool*, mozIDOMWindowProxy**)::$_3&&, nsIThread*) (aPredicate=..., aThread=<optimized out>)
at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/nsThreadUtils.h:323
#24 0x00007fe845ca3743 in mozilla::dom::ContentChild::ProvideWindowCommon(mozilla::dom::TabChild*, mozIDOMWindowProxy*, bool, unsigned int, bool, bool, bool, nsIURI*, nsAString const&, nsACString const&, bool, bool*, mozIDOMWindowProxy**) (
this=0x7fe853026020, aTabOpener=<optimized out>, aParent=0x7fe82b190020, aIframeMoz=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aChromeFlags=4094, aCalledFromJS=true, aPositionSpecified=false, aSizeSpecified=false, aURI=<optimized out>, aName=u"test", aFeatures=<gNullChar> "", aForceNoOpener=<optimized out>, aWindowIsNew=0x7ffd2d8f2047, aReturn=<optimized out>)
at /home/eitan/Mozilla/gecko/dom/ipc/ContentChild.cpp:969
#25 0x00007fe845cc935e in mozilla::dom::TabChild::ProvideWindow(mozIDOMWindowProxy*, unsigned int, bool, bool, bool, nsIURI*, nsAString const&, nsACString const&, bool, bool*, mozIDOMWindowProxy**) (
this=0x7fe82b2da000, aParent=0x7fe82b190020, aChromeFlags=4094, aCalledFromJS=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aPositionSpecified=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aSizeSpecified=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aURI=<optimized out>, aName=..., aFeatures=..., aForceNoOpener=<optimized out>, aWindowIsNew=<optimized out>, aReturn=<optimized out>) at /home/eitan/Mozilla/gecko/dom/ipc/TabChild.cpp:1003
#26 0x00007fe84759a1e3 in nsWindowWatcher::OpenWindowInternal(mozIDOMWindowProxy*, char const*, char const*, char const*, bool, bool, bool, nsIArray*, bool, bool, nsIDocShellLoadInfo*, mozIDOMWindowProxy**) (this=0x7fe82b2f6680, aParent=0x7fe82b190020, aUrl=<optimized out>, aName=<optimized out>, aFeatures=<optimized out>, aCalledFromJS=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aDialog=<optimized out>, aNavigate=<error reading variable: access outside bounds of object referenced via synthetic pointer>, aArgv=<optimized out>, aIsPopupSpam=<optimized out>, aForceNoOpener=<optimized out>, aLoadInfo=0x0, aResult=<optimized out>)
at /home/eitan/Mozilla/gecko/toolkit/components/windowwatcher/nsWindowWatcher.cpp:879
#27 0x00007fe84759b46e in non-virtual thunk to nsWindowWatcher::OpenWindow2(mozIDOMWindowProxy*, char const*, char const*, char const*, bool, bool, bool, nsISupports*, bool, bool, nsIDocShellLoadInfo*, mozIDOMWindowProxy**) () at /home/eitan/Mozilla/gecko/toolkit/components/windowwatcher/nsWindowWatcher.cpp:444
#28 0x00007fe844b06a09 in nsGlobalWindow::OpenInternal(nsAString const&, nsAString const&, nsAString const&, bool, bool, bool, bool, bool, nsIArray*, nsISupports*, nsIDocShellLoadInfo*, bool, nsPIDOMWindowOuter**) (this=<optimized out>, aUrl=gdb.MemoryError: Cannot access memory at address 0x7ffd00000002
#29 0x00007fe844b061c7 in nsGlobalWindow::OpenJS(nsAString const&, nsAString const&, nsAString const&, nsPIDOMWindowOuter**) (this=<optimized out>, aUrl=u"data:text/html;base64,PGhlYWQ+CjxzY3JpcHQ+CmRvY3VtZW50LmFkZEV2ZW50TGlzdGVuZXIoIkRPTUNvbnRlbnRMb2FkZWQiLCBmdW5jdGlvbigpewogIGxldCBkPWRvY3VtZW50LmdldEVsZW1lbnRCeUlkKCdhJykucGFyZW50Tm9kZTsKICBkLnJlbW92ZU"..., aName=u"test", aOptions=<mozilla::dom::WindowBinding::open(JSContext*, JS::Handle<JSObject*>, nsGlobalWindow*, JSJitMethodCallArgs const&)::data> u"", _retval=0x7fe8481fafa4) at /home/eitan/Mozilla/gecko/dom/base/nsGlobalWindow.cpp:8955
#30 0x00007fe844b061c7 in nsGlobalWindow::OpenOuter(nsAString const&, nsAString const&, nsAString const&, mozilla::ErrorResult&) (this=<optimized out>, aUrl=..., aName=..., aOptions=..., aError=...)
at /home/eitan/Mozilla/gecko/dom/base/nsGlobalWindow.cpp:8917
#31 0x00007fe844b061c7 in nsGlobalWindow::Open(nsAString const&, nsAString const&, nsAString const&, mozilla::ErrorResult&) (this=<optimized out>, aUrl=..., aName=..., aOptions=..., aError=...)
at /home/eitan/Mozilla/gecko/dom/base/nsGlobalWindow.cpp:8926
#32 0x00007fe8452848e0 in mozilla::dom::WindowBinding::open(JSContext*, JS::Handle<JSObject*>, nsGlobalWindow*, JSJitMethodCallArgs const&) (cx=<optimized out>, obj=..., self=<optimized out>, args=...)
---Type <return> to continue, or q <return> to quit---
at /home/eitan/Mozilla/gecko/objdir-linux/dom/bindings/WindowBinding.cpp:2404
#33 0x00007fe845284381 in mozilla::dom::WindowBinding::genericMethod(JSContext*, unsigned int, JS::Value*) (cx=0x7fe838ed0000, argc=<optimized out>, vp=<optimized out>)
at /home/eitan/Mozilla/gecko/objdir-linux/dom/bindings/WindowBinding.cpp:15679
#34 0x00007fe8477b7806 in js::CallJSNative(JSContext*, bool (*)(JSContext*, unsigned int, JS::Value*), JS::CallArgs const&) (native=0x7fe845284230 <mozilla::dom::WindowBinding::genericMethod(JSContext*, unsigned int, JS::Value*)>, cx=<optimized out>, args=...)
at /home/eitan/Mozilla/gecko/js/src/jscntxtinlines.h:293
#35 0x00007fe8477b7806 in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x7fe838ed0000, args=..., construct=<optimized out>)
at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:470
#36 0x00007fe8477b2502 in js::CallFromStack(JSContext*, JS::CallArgs const&) (cx=0x7fe838ed0000, args=...) at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:521
#37 0x00007fe8477b2502 in Interpret(JSContext*, js::RunState&) (cx=<optimized out>, state=...)
at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:3065
#38 0x00007fe8477a9392 in js::RunScript(JSContext*, js::RunState&) (cx=0x7fe838ed0000, state=...)
at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:410
#39 0x00007fe8477b785a in js::InternalCallOrConstruct(JSContext*, JS::CallArgs const&, js::MaybeConstruct) (cx=0x7fe838ed0000, args=..., construct=js::NO_CONSTRUCT)
at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:488
#40 0x00007fe8477b7b59 in js::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, js::AnyInvokeArgs const&, JS::MutableHandle<JS::Value>) (cx=0x7fe8211a9000, fval=..., thisv=..., args=..., rval=...)
at /home/eitan/Mozilla/gecko/js/src/vm/Interpreter.cpp:534
#41 0x00007fe847aaf355 in JS::Call(JSContext*, JS::Handle<JS::Value>, JS::Handle<JS::Value>, JS::HandleValueArray const&, JS::MutableHandle<JS::Value>) (cx=0x7fe838ed0000, thisv=..., fval=..., args=..., rval=...) at /home/eitan/Mozilla/gecko/js/src/jsapi.cpp:2948
#42 0x00007fe8453778df in mozilla::dom::EventHandlerNonNull::Call(JSContext*, JS::Handle<JS::Value>, mozilla::dom::Event&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&) (this=
0x7fe82117d6d0, cx=0x7fe838ed0000, aThisVal=..., event=..., aRetVal=..., aRv=...)
at /home/eitan/Mozilla/gecko/objdir-linux/dom/bindings/EventHandlerBinding.cpp:260
#43 0x00007fe8457016e9 in mozilla::dom::EventHandlerNonNull::Call<nsISupports*>(nsISupports* const&, mozilla::dom::Event&, JS::MutableHandle<JS::Value>, mozilla::ErrorResult&, char const*, mozilla::dom::CallbackObject::ExceptionHandling, JSCompartment*) (event=..., aRetVal=..., aRv=..., aExecutionReason=<optimized out>, aExceptionHandling=mozilla::dom::CallbackObject::eReportExceptions, aCompartment=<optimized out>, this=<optimized out>, thisVal=<optimized out>)
at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/mozilla/dom/EventHandlerBinding.h:362
#44 0x00007fe8457016e9 in mozilla::JSEventHandler::HandleEvent(nsIDOMEvent*) (this=0x7fe82117d700, aEvent=<optimized out>) at /home/eitan/Mozilla/gecko/dom/events/JSEventHandler.cpp:215
#45 0x00007fe8456ee60e in mozilla::EventListenerManager::HandleEventSubType(mozilla::EventListenerManager::Listener*, nsIDOMEvent*, mozilla::dom::EventTarget*) (this=0x7fe8222f3ce0, aListener=<optimized out>, aDOMEvent=0x7fe82219cf60, aCurrentTarget=0x7fe82116f800)
at /home/eitan/Mozilla/gecko/dom/events/EventListenerManager.cpp:1142
#46 0x00007fe8456ef082 in mozilla::EventListenerManager::HandleEventInternal(nsPresContext*, mozilla::WidgetEvent*, nsIDOMEvent**, mozilla::dom::EventTarget*, nsEventStatus*) (this=0x7fe8222f3ce0, aPresContext=0x7fe822141000, aEvent=
0x7ffd2d8f3818, aDOMEvent=0x7ffd2d8f3720, aCurrentTarget=0x7fe82116f800, aEventStatus=0x7ffd2d8f3728) at /home/eitan/Mozilla/gecko/dom/events/EventListenerManager.cpp:1314
#47 0x00007fe8456e46d0 in mozilla::EventTargetChainItem::HandleEventTargetChain(nsTArray<mozilla::EventTargetChainItem>&, mozilla::EventChainPostVisitor&, mozilla::EventDispatchingCallback*, mozilla::ELMCreationDetector&) (aChain=nsTArray<mozilla::EventTargetChainItem> & = {...}, aVisitor=..., aCallback=<optimized out>, aCd=...) at /home/eitan/Mozilla/gecko/dom/events/EventDispatcher.cpp:464
#48 0x00007fe8456e54d6 in mozilla::EventDispatcher::Dispatch(nsISupports*, nsPresContext*, mozilla::WidgetEvent*, nsIDOMEvent*, nsEventStatus*, mozilla::EventDispatchingCallback*, nsTArray<mozilla::dom::EventTarget*>*) (aTarget=<optimized out>, aPresContext=<optimized out>, aEvent=<optimized out>, aDOMEvent=0x0, aEventStatus=<optimized out>, aCallback=0x0, aTargets=<optimized out>)
---Type <return> to continue, or q <return> to quit---
at /home/eitan/Mozilla/gecko/dom/events/EventDispatcher.cpp:824
#49 0x00007fe846172e91 in nsDocumentViewer::LoadComplete(nsresult) (this=0x7fe822296230, aStatus=<optimized out>) at /home/eitan/Mozilla/gecko/layout/base/nsDocumentViewer.cpp:1095
#50 0x00007fe847257d97 in nsDocShell::EndPageLoad(nsIWebProgress*, nsIChannel*, nsresult) (this=0x7fe82b13e000, aProgress=<optimized out>, aChannel=0x7fe82213e870, aStatus=<optimized out>)
at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:7698
#51 0x00007fe847256c2a in nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, nsresult) (this=<optimized out>, aProgress=<optimized out>, aRequest=<optimized out>, aStateFlags=<optimized out>, aStatus=<optimized out>) at /home/eitan/Mozilla/gecko/docshell/base/nsDocShell.cpp:7496
#52 0x00007fe847258c70 in non-virtual thunk to nsDocShell::OnStateChange(nsIWebProgress*, nsIRequest*, unsigned int, nsresult) () at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/mozilla/Vector.h:937
#53 0x00007fe84469c12f in nsDocLoader::DoFireOnStateChange(nsIWebProgress*, nsIRequest*, int&, nsresult) (this=<optimized out>, aProgress=0x7fe82b13e028, aRequest=0x7fe82213e870, aStateFlags=@0x7ffd2d8f3ee4: 131088, aStatus=nsresult::NS_OK) at /home/eitan/Mozilla/gecko/uriloader/base/nsDocLoader.cpp:1299
#54 0x00007fe84469bbe3 in nsDocLoader::doStopDocumentLoad(nsIRequest*, nsresult) (this=<optimized out>, request=0x7fe82213e870, aStatus=nsresult::NS_OK)
at /home/eitan/Mozilla/gecko/uriloader/base/nsDocLoader.cpp:860
#55 0x00007fe84469abd9 in nsDocLoader::DocLoaderIsEmpty(bool) (this=0x7fe82b13e000, aFlushLayout=<error reading variable: access outside bounds of object referenced via synthetic pointer>)
at /home/eitan/Mozilla/gecko/uriloader/base/nsDocLoader.cpp:749
#56 0x00007fe84469b614 in nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, nsresult) (this=0x7fe82b13e000, aRequest=<optimized out>, aCtxt=<optimized out>, aStatus=<optimized out>)
at /home/eitan/Mozilla/gecko/uriloader/base/nsDocLoader.cpp:631
#57 0x00007fe84469babd in non-virtual thunk to nsDocLoader::OnStopRequest(nsIRequest*, nsISupports*, nsresult) () at /home/eitan/Mozilla/gecko/objdir-linux/dist/bin/libxul.so
#58 0x00007fe843bdfa41 in mozilla::net::nsLoadGroup::RemoveRequest(nsIRequest*, nsISupports*, nsresult) (this=0x7fe838e9ca80, request=0x7fe8220452f0, ctxt=<optimized out>, aStatus=nsresult::NS_OK)
at /home/eitan/Mozilla/gecko/netwerk/base/nsLoadGroup.cpp:629
#59 0x00007fe844bf1fdc in nsDocument::DoUnblockOnload() (this=0x7fe822140000)
at /home/eitan/Mozilla/gecko/dom/base/nsDocument.cpp:8922
#60 0x00007fe844bf1fdc in nsDocument::UnblockOnload(bool) (this=0x7fe822140000, aFireSync=<optimized out>) at /home/eitan/Mozilla/gecko/dom/base/nsDocument.cpp:8844
#61 0x00007fe844be7bdc in nsDocument::DispatchContentLoadedEvents() (this=0x7fe822140000)
at /home/eitan/Mozilla/gecko/dom/base/nsDocument.cpp:5365
#62 0x00007fe844c1dcd7 in mozilla::detail::RunnableMethodArguments<>::applyImpl<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)(), mozilla::Tuple<>&, mozilla::IndexSequence<>) (o=<optimized out>, m=<optimized out>, args=...)
at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/nsThreadUtils.h:1138
#63 0x00007fe844c1dcd7 in mozilla::detail::RunnableMethodArguments<>::apply<nsDocument, void (nsDocument::*)()>(nsDocument*, void (nsDocument::*)()) (o=<optimized out>, m=<optimized out>, this=<optimized out>)
at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/nsThreadUtils.h:1144
#64 0x00007fe844c1dcd7 in mozilla::detail::RunnableMethodImpl<nsDocument*, void (nsDocument::*)(), true, (mozilla::RunnableKind)0>::Run() (this=<optimized out>)
at /home/eitan/Mozilla/gecko/objdir-linux/dist/include/nsThreadUtils.h:1187
#65 0x00007fe843b4c197 in mozilla::SchedulerGroup::Runnable::Run() (this=0x7fe8211b57f0)
at /home/eitan/Mozilla/gecko/xpcom/threads/SchedulerGroup.cpp:367
#66 0x00007fe843b5a808 in nsThread::ProcessNextEvent(bool, bool*) (this=0x7fe84191a880, aMayWait=<optimized out>, aResult=0x7ffd2d8f4387) at /home/eitan/Mozilla/gecko/xpcom/threads/nsThread.cpp:1422
#67 0x00007fe843b5c20f in NS_ProcessNextEvent(nsIThread*, bool) (aThread=0x7fe8211a9000, aMayWait=<error reading variable: access outside bounds of object referenced via synthetic pointer>)
at /home/eitan/Mozilla/gecko/xpcom/threads/nsThreadUtils.cpp:474
#68 0x00007fe844074978 in mozilla::ipc::MessagePump::Run(base::MessagePump::Delegate*) (this=0x7fe8530ca920, aDelegate=0x7ffd2d8f44a8) at /home/eitan/Mozilla/gecko/ipc/glue/MessagePump.cpp:97
#69 0x00007fe8440101eb in MessageLoop::RunInternal() (this=0x7fe8481fafa4)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:320
---Type <return> to continue, or q <return> to quit---
#70 0x00007fe8440101eb in MessageLoop::RunHandler() (this=<optimized out>)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:313
#71 0x00007fe8440101eb in MessageLoop::Run() (this=0x7fe8481fafa4)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:293
#72 0x00007fe845effbb9 in nsBaseAppShell::Run() (this=0x7fe83111aec0)
at /home/eitan/Mozilla/gecko/widget/nsBaseAppShell.cpp:156
#73 0x00007fe8475c5fc4 in XRE_RunAppShell() ()
at /home/eitan/Mozilla/gecko/toolkit/xre/nsEmbedFunctions.cpp:895
#74 0x00007fe8440101eb in MessageLoop::RunInternal() (this=0x7fe8481fafa4)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:320
#75 0x00007fe8440101eb in MessageLoop::RunHandler() (this=<optimized out>)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:313
#76 0x00007fe8440101eb in MessageLoop::Run() (this=0x7fe8481fafa4)
at /home/eitan/Mozilla/gecko/ipc/chromium/src/base/message_loop.cc:293
#77 0x00007fe8475c5cdb in XRE_InitChildProcess(int, char**, XREChildData const*) (aArgc=<optimized out>, aArgv=0x7ffd2d8f58b8, aChildData=<optimized out>)
at /home/eitan/Mozilla/gecko/toolkit/xre/nsEmbedFunctions.cpp:711
#78 0x0000000000405951 in content_process_main(mozilla::Bootstrap*, int, char**) (bootstrap=
0x7fe8530b90a0, argc=<optimized out>, argv=0x7ffd2d8f58b8)
at /home/eitan/Mozilla/gecko/browser/app/../../ipc/contentproc/plugin-container.cpp:64
#79 0x0000000000405951 in main(int, char**, char**) (argc=<optimized out>, argv=0x7ffd2d8f58b8, envp=0x7ffd2d8f5940) at /home/eitan/Mozilla/gecko/browser/app/nsBrowserApp.cpp:286|
|
||
Comment 4•7 years ago
|
||
NM the last comment, looks like I was encountering bug 1370089.
|
||
Comment 5•7 years ago
|
||
(In reply to Eitan Isaacson [:eeejay] from comment #4) > NM the last comment, looks like I was encountering bug 1370089. Eitan, what about this one, does it work for you?
Flags: needinfo?(eitan)
Priority: -- → P2
|
|
||
Comment 6•7 years ago
|
||
Can't reproduce this with a recent ASAN build. Tyson, is this still a thing?
Flags: needinfo?(eitan) → needinfo?(twsmith)
|
|
Reporter | |
Comment 7•7 years ago
|
||
I can no longer reproduce this. I assume it was fixed by one of the other changes :)
Flags: needinfo?(twsmith)
|
|
||
Comment 8•7 years ago
|
||
workforme per comment #7
Status: NEW → RESOLVED
Closed: 7 years ago
Resolution: --- → WORKSFORME
You need to log in
before you can comment on or make changes to this bug.
Description
•